Questions tagged [openvpn]

OpenVPN is a free and open source software VPN solution. It allows secure point-to-point or site-to-site connections with routed or bridged configurations and remote access facilities.

OpenVPN is a free and open source software application that implements VPN techniques for creating secure point-to-point or site-to-site connections in routed or bridged configurations and remote access facilities. It uses SSL/TLS security for encryption and is capable of traversing network address translators and firewalls.

It's architecture is build upon 4 principles:

  • Encryption
  • Authentication
  • Networking
  • Security

More info is to be found on the Open-Source site of VPN.
A very thorough tutorial can be found on Shorewall.

3274 questions
5
votes
1 answer

How to set OpenVPN client bind address?

The OpenVPN client machine has two interfaces to Internet: a low-speed and high-speed one. Default route goes throught the low-speed one. I'd like OpenVPN to connect to server through the high-speed one. How can that be done? Like in ping, I can use…
Mika Vatanen
  • 153
  • 1
  • 1
  • 4
5
votes
2 answers

Differences between SSH's tunnels and OpenVPN

I discovered that recent OpenSSH has support for tun devices. When it comes to tunnels and VPNs, I always thought the main programme was OpenVPN. Are there any advantages to using SSH tunnels? What about security? Either one easier to set up?
Amandasaurus
  • 31,471
  • 65
  • 192
  • 253
5
votes
1 answer

Pros / cons of using password-less OpenVPN client keys

I'm setting up an OpenVPN server for my organization, and I'm reading up on the different ways that the client side keys work. I'm still a little unfamiliar with all of the concepts behind these client keys and account auth. What are the real…
andrewvnice
  • 157
  • 1
  • 1
  • 6
5
votes
2 answers

What's the best method to monitor an OpenVPN server?

I have an OpenVPN server machine which resides on an isolated network, a NAT rule in the company's firewall is redirecting all traffic on port 1194 (tcp) from the public IP I chose to the internal address of the OpenVPN server machine. I'd like to…
Itai Ganot
  • 10,644
  • 29
  • 93
  • 146
5
votes
2 answers

Is it possible to allow a machine on openvpn to connect to only one server on the network?

I have an OpenVPN server which is already functioning properly and allowing people to work on our servers. There's a new project which requires me to allow access to the network and into one specific server within the network for a group of…
Itai Ganot
  • 10,644
  • 29
  • 93
  • 146
5
votes
1 answer

Why could port 1194 not be accessed while OpenVPN is running?

I installed openVPN on my server. By default, the port 1194 is choosen. The problem is that when I am running: sudo nmap -sU localhost -p 1194 It shows me: PORT STATE SERVICE 1194/udp closed openvpn I was trying to: sudo /sbin/iptables -I…
Milos Cuculovic
  • 423
  • 3
  • 8
  • 22
5
votes
4 answers

OpenVPN client connects but can't access internet

I setup an Openvpn server on a centos box and I can get the client to connect (osx) but can't access the internet or even the local network. I thought maybe DNS but couldn't access any sites via IP. Any help would be appreciated. I will list my…
Fr0ntSight
  • 186
  • 1
  • 3
  • 10
5
votes
1 answer

iptables rule(s) to send openvpn traffic from clients over an sshuttle tunnel?

I have an Ubuntu 12.04 box with OpenVPN. The VPN is working as expected -- clients can connect, browse the Web, etc. The OpenVPN server IP is 10.8.0.1 on tun0. On that same box, I can use sshuttle to tunnel into another network to access a Web…
Sam Martin
  • 151
  • 3
5
votes
1 answer

IP served by OpenVPN doesn't take ipp.txt into account

I'm facing some troubles right now with an OpenVPN server an former colleague set up (I'm not too into it ATM). We're using OpenVPN for a private network of ~200 clients (to be more specific, only 15 clients, with VMs on them, bridged to the same…
Guillaume Fenollar
  • 261
  • 1
  • 2
  • 5
5
votes
2 answers

openvpn: connection established, can't ping server tun interface (debian server, windows & os x clients)

My goal: I want to set up openVPN on a vServer from the company netcup, running Debian squeeze. I only want a VPN connection from client to server; clients should not be able to see each other, also the server doesn't need to serve as a gateway to…
hreimer
  • 181
  • 1
  • 2
  • 10
5
votes
2 answers

How can I configure openvpn to proxy traffic only for processes that bind to the tun interface?

I'm trying to configure openvpn so that only traffic from certain processes goes over the vpn, but those processes could connect to anywhere. I'm trying to do that by having openvpn not do any route configuration (--route-noexec) and having…
bobpoekert
  • 293
  • 2
  • 8
5
votes
1 answer

Where to put OpenVPN server - DMZ or LAN?

We have a Smoothwall firewall with both a "green" network (LAN) and an "orange" network (DMZ), and we would like to use OpenVPN access server as our VPN server. The question is: Should the VPN server go in the LAN or the DMZ? And, if in the DMZ,…
Andrew Bate
  • 161
  • 1
  • 1
  • 5
5
votes
1 answer

openVPN: Changing Windows 7 firewall settings

I had a problem where Windows 7 would not allow inbound connections over my openVPN tunnel. Meaning that my Windows 7 client would allow outbound and established connections but not allow inbound connections coming from openVPN network. For…
Lucas Kauffman
  • 16,880
  • 9
  • 58
  • 93
5
votes
3 answers

Replace DNS on Openvpn client without redirect-gateway

I am trying to push DNS to the client with OpenVPN server with config: push "dhcp-option DNS 192.168.x.x" It is working well, but what I really need is that during the VPN connection I do not want to use my primary resolvers, clients should use…
Gabor Vincze
  • 554
  • 1
  • 4
  • 11
5
votes
2 answers

OpenVPN bad source address from client

I have one problem with OpenVPN. There are a lot drops records in the openvpn log file on the server: Mon Oct 22 10:14:41 2012 us=726541 laptop/ххх:1194 MULTI: bad source address from client [192.168.1.107], packet dropped grep -E "^[a-z]"…
Klesk
  • 81
  • 1
  • 4